I'm not sure if you're trying to strawman or are inexperienced. No, this in no way or shape looks like installing a legitimate dependency to the target audienc

I'm not sure if you're trying to strawman or are inexperienced. No, this in no way or shape looks like installing a legitimate dependency to the target audience (expert users). This is a package manager, you don't install dependencies via post_install.